Windows Print server 2012R doesn't work after changing G/W to F-5

Question

Currently we have windows print server 2012R behind netscalar and when we try to migrate the server to F-5 we are facing issues. When the G/W IP of the server is changed to the F-5 default gateway, print services aren't working nor server team can access the node. We have fast-L4 configured on the VIP with auto-map enabled on it and server has loopback configured with the VIP
We did clone one of the production nodes for test purpose, created a new node with default gateway as F-5 and it works fine but when we try to move the production node to F-5 we are having issues. Can anyone please help me, I am not able to resolve this print server issue&nbsp;

pushkar_misra_2 · Answer

Do you have forwarding VS configured for the server subnet. For F5 to actually work as gateway a forwarding server would be needed for L2 traffic forwarding to allow a general traffic to reach the server. &nbsp;
It would be helpful if you could post config of F5 self IPs, VS and route map on server.&nbsp;

sai_mallampeta_ · Answer

Yes, i do have VS (IP forwarding concept)configured for the server subnet. I do have other VS that are working fine but I am having issues with the MS print servers. We did clone the print servers created another node 3&amp;4, it works fine but not the production one 1&amp;2. below is the configuration of the Printer VIP
ltm virtual Printer {
    description Printer
    destination 10.33.17.124:any
    ip-protocol tcp
    mask 255.255.255.255
    persist {
        source_addr {
            default yes
        }
    }
    pool Printer
    profiles {
        Printer-Fast-L4 { }
        http { }
    }
    source 0.0.0.0/0
    source-address-translation {
        type automap
    }
    translate-address enabled
    translate-port disabled
    vs-index 29
This my Forwarding IP configuration on the F-5, so that backend servers can communicate with other internal servers
ltm virtual Outbound-Forwarding {
description "Inter-Vlan routing between Internal and External vlan's"
destination 0.0.0.0:any
ip-forward
mask any
profiles {
    MyL4Profile { }
}
source 0.0.0.0/0
translate-address disabled
translate-port disabled
vlans {
    External
    Internal_vlan314
    Internal_vlan977
}
vlans-enabled
vs-index 48

}

i_r_101_110 · Answer

What is the reasoning for the server sharing a loopback IP with the VIP? Are you doing layer 2 n-path and bypassing the F5 for the return traffic? And if so, why? Make the traffic flow symmetrical if possible. Also, if you must do n-path, you must disable the translate-address flag in your VIP. If you're not doing n-path - that loopback doesn't belong. &nbsp;
Could you also clarify whether you're having issue with the printer vip that you posted or the VIP that should be handling the default gateway traffic? &nbsp;

Forum Discussion

AppWorld Berlin iRules Contest!

F5 AppWorld 2026 Las Vegas - iRules Contest Winners!

Recent Discussions

Changes to DO and AS3 GitHub - no longer monitored

How to Verify config before loading to F5

Logical Disk Full to Migrate rSeries

HSL - Local TimeZone - in syslog server

VIP control across data centers - how to ensure only 1 VIP is up at a time?

Related Content

F5 BIG-IP Access Policy Manager (APM) Machine Tunnels for Windows

Massive DDoS, DanaBot Dismantled, Scraped Discord Messages and Signal Blocks Windows Recall

F5 Access for Windows 10/Windows 10 Mobile Now Available

Windows Critical RCE Vulnerability, Malicious Solana-py, and EDRKillShifter

Getting Started with the F5 Wireshark Plugin on Windows